CVE-2017-13133 - CERT CVE
ID CVE-2017-13133
Sažetak In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
Reference
CVSS
Base: 7.1
Impact: 6.9
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE COMPLETE
CVSS vektor AV:N/AC:M/Au:N/C:N/I:N/A:C
Zadnje važnije ažuriranje 08-09-2020 - 00:15
Objavljeno 23-08-2017 - 03:29